Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-AbYNoXx2Xnte10KgvngaRY-IiQ.roa
File: 1-AbYNoXx2Xnte10KgvngaRY-IiQ.roa (raw, json)
Hash identifier: 5u2b2gKJleAb3B+PlOKyer7/4oXUZ1wbQ4UHVWEp32I=
Subject key identifier: F8:06:D8:36:85:F1:D9:79:ED:7B:5D:0A:82:F9:E0:69:16:3E:22:24
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F7B455064564B7A95E1C36A83135E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-AbYNoXx2Xnte10KgvngaRY-IiQ.roa
Signing time: Mon 12 Dec 2022 07:32:04 +0000
ROA not before: Mon 12 Dec 2022 07:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 109.188.0.0/17 maxlen: 17
94.25.128.0/18 maxlen: 18
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:7b:45:50:64:56:4b:7a:95:e1:c3:6a:83:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f806d83685f1d979ed7b5d0a82f9e069163e2224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:ca:d2:71:d1:2c:ea:fe:33:93:82:c6:20:
3b:72:32:e0:8d:3b:ca:68:9f:2c:ba:60:ae:82:72:
70:08:be:5d:8e:fb:04:67:64:79:00:6e:bf:a3:e6:
c0:c1:e8:a1:28:0d:60:5c:60:6e:90:b6:bc:db:d7:
5c:ae:21:3c:50:4d:73:85:fb:33:db:f6:81:77:25:
23:01:9e:1f:2b:38:9f:f0:57:d4:27:ad:86:79:ad:
04:64:b4:a5:c1:45:b8:2a:ba:75:f3:69:45:39:e9:
99:e3:2e:84:f9:94:4c:57:79:2a:74:de:63:48:d8:
a7:52:e8:cf:2f:3c:df:79:cc:d7:10:98:19:a2:36:
e0:07:0b:f3:7f:4b:3d:72:07:3f:0e:4e:cf:fa:44:
97:d8:88:01:79:b8:af:5a:af:99:17:2d:cf:25:8c:
67:28:dd:94:10:a8:b3:f0:44:d1:bb:57:f6:fa:a5:
4e:1c:28:a3:89:5a:88:2c:72:71:b4:35:47:50:06:
cd:70:4c:32:5c:52:a4:bf:aa:01:a5:ed:b6:37:6a:
e2:16:55:e0:ae:54:f0:f9:6f:73:a0:17:f6:42:04:
26:90:18:c3:f3:92:05:9c:f9:7f:2f:98:7d:44:40:
dc:13:7a:af:e4:3d:dc:6d:c3:f6:cd:bc:ba:88:e7:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:06:D8:36:85:F1:D9:79:ED:7B:5D:0A:82:F9:E0:69:16:3E:22:24
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-AbYNoXx2Xnte10KgvngaRY-IiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
79:5c:23:db:a1:60:0d:df:f0:92:8b:6a:19:9d:98:93:2d:30:
23:03:cf:5a:b6:b1:2a:99:88:07:81:3d:51:49:58:fc:d7:04:
4e:fc:d6:6b:d2:9d:35:e3:79:5a:7a:55:e6:0c:97:b5:21:4c:
8f:f7:78:a0:fb:ac:af:7a:96:ab:c1:b6:97:d8:21:2c:cc:e8:
eb:8b:b4:2f:0a:11:ad:f3:e9:e6:31:de:fa:31:1c:d7:39:38:
4e:1f:a4:e7:f0:3d:03:19:6a:c7:12:75:66:86:7e:b5:a3:53:
4d:86:5d:24:58:ec:ad:97:c7:2b:7c:95:0e:16:37:80:67:3e:
4c:3a:bd:c0:4b:c3:1d:e5:63:37:77:19:27:e8:53:5b:f7:0f:
41:02:41:e7:90:36:6f:ad:0c:32:0a:91:0c:4a:da:39:cf:00:
69:8a:f9:04:41:c1:d5:04:8e:96:0f:f6:73:d1:3b:b7:85:4b:
ff:38:a2:60:38:0a:40:6b:22:81:e7:da:ff:aa:e6:f6:85:fc:
0b:71:b7:8c:5d:5a:bc:55:f2:d6:bd:72:5b:2c:2d:1f:00:b6:
70:f1:d3:b9:8a:be:e6:c1:46:a1:13:c0:cb:9c:8d:5a:a0:0b:
28:c3:51:c3:b1:9e:a6:18:6d:cb:c3:eb:02:17:d6:6a:c4:59:
ff:6a:01:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:10 2025 by rpki-client